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(54) Data security device. 

(57) A device (10) for protecting stored sensitive 
data includes a housing (12) formed by a top 
plate (P1), a base plate (P6) and a four side 
plates (P2-P5), each plate carrying a meander- 
ing electrically conductive path segment. A 
printed circuit board (14) is mounted in the 
housing (12) and carries electronic circuit com- 
ponents including a memory (110) for the stored 
sensitive data. The four side plates (P2-P5) are 
disposed in an end-to-side configuration. Three 
of the side plates (P2,P4,P5) are mounted be- 
tween the top and base plates (P1,P6), and the 
fourth side plate (P3) is mounted between the 
top plate (PI) and the PCB (14), which projects 
from the housing (12) at this location. The 
conductive path segments on the side plates 
(P2-P5) are interconnected via frangible electri- 
cally conductive epoxy material (40) and con- 
ductive tracks on the PCB, except that the 
conductive path segment on the fourth plate 
(P3) is connected directly to the conductive 
path segment on an adjacent plate (P2) by a 
6-sided interconnection block (250). If the adhe- 
sive binding the housing components together 
is removed, side plate pivoting is prevented by 
the end-to-side disposition and/or the frangible 
epoxy material (40) and/or the interconnection 
block (250). 
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This invention relates to data security devices for 
storing sensitive data. 

U.S. Patent No. 4,807,284, issued February 21, 
1989 and assigned to the assignee of the present 
application, discloses a security device containing a 
memory which stores sensitive data. The device has 
a housing formed by six plates each carrying a con- 
ductive path segment formed by thick film deposition 
techniques and each having a meandering configu- 
ration covering substantially the entire inner surface 
of the plate. The four side plates are glued together 
and attached by an adhesive to a printed circuit board 
(PCB) which is mounted on the base plate. The top 
plate is glued to the four side plates. The conductive 
path segments on the side and base plates are inter- 
connected to form a wire mesh by conductive tracks 
on the PCB. The conductive path segment on the top 
plate is connected by conductive wires, which extend 
through plated through holes in the PCB. Interruption 
of the wire mesh brought about by an attempt to break 
into the housing causes a reset signal generator to 
erase the contents of the memory. 

Although the known security device provides a 
high degree of security, there remains a risk of 
unauthorized housing penetration via the edge of the 
printed circuit board. Also, it may be possible for an 
unauthorized person to gain access to the interior of 
the security device by removing the adhesive or glue 
which secures one of the side plates and thereafter 
pivoting that side plate so as to provide an aperture 
sufficient to insert an electrical probing conductor into 
the device and make contact which the electronic cir- 
cuity therein, without damaging the conductive prop- 
erty of the conductive epoxy utilized in the wire mesh. 

It is an object of the present invention to provide 
a security housing having increased security against 
unauthorized access as compared with the known 
device, while being simple to manufacture and hence 
low in cost. 

Therefore, according to the present invention, 
there is provided a security device for protecting 
stored sensitive data, including a closed housing con- 
taining memory means adapted to store sensitive 
data and including a top plate, a base plate and a 
plurality of side plates having meandering conductive 
path segments provided on side faces thereof, and 
interconnection means arranged to electrically inter- 
connect said conductive path segments to form con- 
ductive path means, the interruption of which brought 
about by an attempt to penetrate said housing causes 
the erasure of the contents of said memory means, 
characterised in that said side plates are disposed 
such that each of said side plates has an end face 
thereof abutting a side face of another side plate, 
whereby pivoting movement of any of said side plates 
resulting from an attempt to penetrate said housing is 
prevented, or results in a disruption of said intercon- 
nection means. 



One embodiment of the present invention will now 
be described by way of example, with reference to the 
accompanying drawings, in which: 

Fig. 1 is a perspective view of a security device 
5 constructed according to the invention; 

Fig. 2 is an exploded perspective view of the sec- 
urity device shown in Fig. 1; 

Fig. 3 is top view of the security device shown in 

Fig. 1 with the top plate removed; 
10 Fig. 4 is a side view of the security device shown 

in Fig 1; 

Fig. 5 is a cross-sectional view of the security 
device shown in Fig. 1; 

Figs. 6 - 9 are further side views of the security 

15 device shown in Fig. 1; 

Figs. 10-14 illustrate the disposition of conduc- 
tive path segments on the side plates of the sec- 
urity device shown in Fig. 1; 
Figs. 15A and 15B are views illustrating the 

20 insulator and conductive layers located on the 

inner surface of the top plate of the security 
device shown in Fig. 1; 

Figs. 16A to 16D inclusive are views illustrating 
insulator and conductive layers located on the 
25 inner surface of the base plate of the security 

device shown in Fig. 1; 

Fig. 17 is a partial sectional view of the security 
device showing the manner in which electrical 
interconnections are made between one of the 

30 side plates and a printed circuit board included in 

the security device shown in Fig. 1; 
Fig. 1 8 is a schematic view of portions of the sec- 
urity device showing the locations of conductive 
interconnection islands on the plates forming the 

35 security device and on the printed circuit board; 

Fig. 19 is a diagram of the interconnection block 
utilized in the security device shown in Fig. 1; 
Fig. 20 is a schematic diagram showing the man- 
ner in which electrical interconnections are made 

40 between the six plates and the printed circuit 

board; 

Fig. 21 is a block diagram illustrating the electrical 
circuity within the security device; and 
Fig. 22 is a ciruit diagram of the tamper detection 
45 circuity shown in Fig. 21. 

Referring first to Figs. 1 and 2 of the drawings, a 
security device 1 0 constructed according to the inven- 
tion includes a housing 12 which is formed by a top 
plate P1 , side plates P2-5 inclusive and a base plate 
so P6. The six plates P1-P6 inclusive are preferably for- 
med by a ceramic material, since ceramic material is 
highly resistant to chemical attack. A printed circuit 
board 14 has mounted thereon in a conventional man- 
ner electronic circuitry 16 including individual elec- 
55 tronic circuit components such as a 16A, 16B, 16C, 
16D, shown schematically in Fig. 2. The components 
16A-16D inclusive are interconnected by conductive 
leads (not shown) which may be provided on both 
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sides of the printed circuit board 14 in a well-known 
manner. 

A portion 14A of the printed circuit board 14 
extends beyond the housing 12 and has mounted the- 
reon a connector 18 having a plurality of sockets 20 
for connection to external circuity (not shown) in an 
apparatus with which the security device 10 is being 
used. The sockets 20 electronically connected with 
the circuit components 16A-16D inclusive by conduc- 
tive leads 22 (Fig. 1) provided on the printed circuit 
board extension 14A. The printed circuit board 14 is 
mounted on the base plate P6. The side plates P2, P4 
and P5 are mounted on the base plate P6 and 
attached thereto by a suitable adhesive. The side 
plate P3, however, which has a smaller height than 
the other three side plates P2, P4 and P5, is mounted 
by means of a adhesive on the printed circuit board 
14, which extends outwardly from the housing 12 
through an aperture between the upper surface of the 
base plate P6 and the lower edge of the side plate P3. 

Referring now to Fig. 3 it will be noted that the four 
side plates P2, P3, P4 and P5 are arranged such that 
each side plate has an end face thereof abutting an 
inner surface of an adjacent side plate. For example, 
the end face 200 of the side plate P4 abuts the inner 
surface 202 of the adjacent side plate P3, whereas at 
the other end of the side plate P4, the inner surface 
206 therefore abuts an end face of the side plate P5. 
This end-to-side construction is repeated for each of 
the side plates so as to form a closed square as in evi- 
dent from Fig. 3, the attachements at the abutting sur- 
faces being effected by an adhesive. 

The above-described construction is illustrated in 
Figs. 4 through 9 inclusive, wherein Fig. 4 is a side 
view showing the outer face of the side plate P5, Fig. 
5 in a cross-sectional view, Fig. 6 is a side view show- 
ing the outer face of the side plate P3, with a cross- 
sectional view of the PCB extension 14A, Fig. 7 is a 
side view showing the outer face of the side plate P3 
and the connector 18, Fig. 8 is a side view showing the 
side plate P4 and Fig. 9 is a side view showing the 
side plate P2. The aforementioned end-to-side 
arrangement of the side plates P2-P5 is clearly seen 
in Figs. 4 through 9. 

The inner surfaces of the six plates P1-P6 inclu- 
sive are provided with respective meandering con- 
ductive path segments (not shown in Figs. 1 and 2). 
The disposition and interconnection of the conductive 
path segments on the respective plates P1-P6 inclu- 
sive will be described in more detail hereinafter. As 
part of the means for interconnecting and conductive 
path segments, there are provided conductive wires 
58, 60 which extend from the top plate P1 through 
plated holes B9, B10, in the printed circuit board 14. 
It should be understood that the holes B9, B10 are 
such that a conductive coating (plating) is provided on 
the surface of the printed circuit board 14 extending 
through the holes in a known manner. The conductive 



wires 58, 60 may be of tin plated cooper material hav- 
ing a diameter of about 0.3 mm and the plated holes 
B9, B10may have a diameter of about 0.5 mm, enabl- 
ing the wires 58, 60 to be readily passed through the 
5 holes B9, B10 during assembly of the security device 
10. 

Referring now to Figs. 10 through 14 inclusive, 
the construction of the conductive path segments on 
the side plates P2-P5 will be described. Referring first 

10 to Fig. 10, it should be understoof that each side plate 
P2-P5 has a meandering conductive path segment 
220 provided over substantially the whole surface 
thereof, wherein parallel interconnected conductive 
strips extended between terminations 222 and 224 at 

15 the lower left-hand and upper right-hand corners, re- 
spectively. The segment 220 is embodied as conduc- 
tive path segment P2C, P3C, P4C, and P5C on the 
respective side plates P2, P3, P4 and P5. 

Referring to Fig. 1 1 , there is shown a view of the 

20 inner surface of the side plate P2, whereon a dielectric 
layer P2D overlies the conductive path segment P2C 
(not shown in Fig. 1 1) which extends over the entire 
surface of the plate P2 except for a narrow end region 
230 which receives the end surface of the plate P4. A 

25 conductive island P2L1 provided on the dielectric 
layer P2D is connected by a conductive line 232 also 
provided on the dielectric layer P2D to connect 
through an opening in the dielectric layer P2D with the 
end 222 of the underlying conductive path segment 

30 P2C. Similarly, a conductive island P2L2 on the 
dielectric layer P2D connects via a conductive line 
234 on the dielectric layer with the end 224 of the 
underlying conductive path segment P2. In an analog- 
ous manner, the conductive islands P3L1 and P3L2, 

35 Fig. 12, on the plate P3 interconnect with the under- 
lying conductive path segment P3C, the conductive 
islands P4L1 , and P4L2, Fig. 13 on the plate P4 inter- 
connect with the underlying conductive path segment 
P4C on the plate P4, and the conductive islands P5L1 

40 and P5L2 interconnect with the underlying conductive 
path segment P5C on the plate P5. 

Referring to Figs. 15A and 15B, there is shown in 
Fig. 15A a dielectric glass layer P1D which overlies a 
conductive path segment P1C, Fig. 15B, formed on 

45 the plate P1. The conductive path segment P1C has 
a meandering configuration over substantially the 
entire surface of the plate except for narrow edge reg- 
ions 84, 86, 88, 90, which receive the edges of the 
side plates P2-P5 when the housing 12 is assembled. 

so The conductive path segment P1C terminates in con- 
ductive islands P1L and P1L2. The dielectric glass 
layer P1 D has holes P1 D1 , P1 D22 therein which over- 
lie the conductive islands P1L1, P1L2, such that elec- 
trical contact can be made to the islands. 

55 Referring to Figs. 16A to 16D inclusive, there is 

shown in Fig. 1 6A a dielectric glass layer P6D2 having 
holes P6D2A and P62DB therein. The holes P6D2A, 
P6D2B overlie conductive islands P6L1 and P6L2 
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(Fig. 16B). The conductive islands P6L1 , P6L2 overlie 
dielectric regions P6D1Aand P6L1B (Fig. 16C). The 
dielectric regions P6D1A, P6D1B have respective 
holes P6D1A1, P6D1B1 therein which overlie the 
ends P6C1, P6C2 of a conductive path segment P6C 
which has a meandering configuration over substan- 
tially the entire surface of the base plate P6 as shown 
in Fig. 16D. It should be understood that the conduc- 
tive islands P6L1, P6L2 on the plate P6 are larger in 
area than the conductive islands on the plates P1-P5 
inclusive, and that the described construction permits 
the meandering conductive path segment P6C on the 
plate P6 to substantially cover the area of the islands 
P6L1 , P6L2, thereby providing additional security with 
respect to the relatively large areas of such islands. 

It should be understood that the respective con- 
ductive and insulator layers, which are superposed on 
the inner surfaces of the plates P1-P6 inclusive, are 
formed by conventional thick film deposition techni- 
ques. Such techniques are well-known and will not be 
described in detail herein. Briefly, for each conductive 
and insulator layer, a different screen is prepared and 
used to deposit a conductive or insulator paste. After 
each screening, the layered plate is headed to about 
800 degrees Celsius to harden the deposited paste. 
The thickness of the conductive layer formed in this 
manner is in the range of about 10-15 microns. Fur- 
thermore, the width and spacing of the meandering 
conductive path segments P1C-P6C inclusive are 
both about 200 microns. 

Referring to Figs. 2 and 18, the printed circuit 
board 14 is provided with conductive islands B1 and 
B4-B8 inclusive which are connected in the assem- 
bled housing 12 with conductive islands on the side 
plates P2-P5 inclusive. The printed circuit board is 
also provided with the plated through holes B9, B10, 
previously described and with conductive regions B1 1 
and B22 which extend through the thickness of the 
printed circuit board 14. 

Referring briefly to Fig. 17, there is shown a par- 
tial cross-sectional view through the plates P2 and P6 
and the printed circuit board 14 in the assembled sec- 
urity device 10. The conductive island P2L2 (Fig. 11) 
on the side plate P2 is electrically connected to a con- 
ductive island B4 on the printed circuit board 14 by 
frangible conductive epoxy bonding material 40. The 
connections between the conductive islands B1, B5, 
B6, B7 and B8 on the printed circuit board 14 and the 
associated conductive islands on the side plates P2- 
P5 inclusive are formed in identical manner using con- 
ductive epoxy material 40. The conductive epoxy 
material 40 has the advantage of being frangible, that 
is, easily broken in response to attempted mechanical 
distortions of the material, while compensating for dif- 
ferences in the thermal expansion coefficients of the 
printed circuit board 14 and the ceramic material of 
the housing plates. Also shown in Fig. 7 is nonconduc- 
tive ceramic filled epoxy bonding material 42 which 



bonds the side plate P2 to the base plate P6. 

It will be noted that the conductive path segments 
P2C and P3C are not connectd together via conduc- 
tive islands on the printed circuit board, but are con- 

5 nected directly together by means of an 
interconnection between the conductive areas P2L1 
and P3L2, which are located above the level of the 
printed circuit board 14. In the preferred embodiment, 
such interconnection is made by a 6-sided intercon- 

10 nection block 250 (to be described) for ease of device 
assembly in manufacture. However, other types of 
interconnections are possible, for example frangible 
electrically conductive epoxy material such as the ma- 
terial 40 could be utilized. 

15 Referring now to Fig. 19, there is shown an inter- 

connection block 250 which, in the preferred embodi- 
ment, serves to connect the conductive island P2L1 
on the side plate P2 with the conductive island P3L2 
on the side plate P3. The interconnection block 250 

20 is a ceramic block having six planes surfaces. On 
three adjacent surfaces 252, 254 and 256 there are 
disposed respective conductive areas 260, 262 and 
264 formed by conventional thick film deposition 
techniques such that a conductive path is formed be- 

25 tween the conductive areas 260 and 264 via the con- 
ductive area 262. The areas 260 and 264 are 
rectangular shape and the area 262 is part-annular 
shape. The interconnection block is attached by con- 
ductive glue material with the conductive area 260 

30 coupling to the conductive island P3L2 on the side 
plate P3 and the conductive area 264 coupling to the 
conductive island P2L1 on the side plate P2. 

The interconnection of the conductive path seg- 
ments P1C-P6C inclusive on the six plates P1-P6 

35 inclusive form a single conductive path, referred to 
herein as a wire mesh WM, which will now be des- 
cribed, with particular reference to Figs. 18-20. It 
should be understood that Fig. 20 is a schematic diag- 
ram illustrating the manner in which the conductive 

40 path segment P1C-P6C inclusive are interconnected 
to form the wire mesh WM. Thus, starting from an 
input terminal TA, the path proceeds to the conductive 
island B1 on the printed circuit board 14, via conduc- 
tive material 40 to the conductive island P3L1 on the 

45 side plate P3. The path continue through the conduc- 
tive path segment P3C on the plate P3 to the conduc- 
tive island P3L2 and hence via the interconnection 
block 250 to conductive island P2L1 on the side plate 
P2. It will be appreciated that the path continues 

so through the conductive path segments on the side 
plates P2, P5 and P4 via the conductive leads 52, 54 
on the printed circuit board 14, which interconnect 
respective conductive island pairs B4, B5, B6, B7 on 
the printed circuit board 14. 

55 Proceeding from conductive path segment P4C 

on the side plate P4, the path continues via conduc- 
tive island B8 and conductive lead 56 on the printed 
circuit board 14. The plated through hole B9 connects 
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to the electrically conductive wire 58 (Fig. 2) which 
extends vertically to contact the island P1L1 on the 
top plate P1. The path continues through the conduc- 
tive path segment P1C on the top plate P1 to the 
island P1L2 and hence via the vertically extending 
electrically conductive wire 60, Fig. 2 to the plated 
through hole B10 in the printed circuit board 14. The 
path continues through a conductive lead 62 on the 
printed circuit board 14 to the electrically conductive 
region B11 which extends through the printed circuit 
board 14 to the lower surface thereof. The conductive 
region B1 1 connects via conductive material 40 with 
the conductive island P6L1 which connects to con- 
ductive path segment P6C on the base place P6. The 
path continues via the conductive island P6L2 to the 
conductive region B12 on the printed circuit board 14 
which connects to an output terminal TB, Fig. 20. 

Although the conductive leads 52, 54, 56, 62 on 
printed circuit board 14 are shown as being provided 
on the upper surface thereof, it will be appreciated that 
portions of such conductive leads could be disposed, 
via feed-through connections in the board 14, on the 
lower side of the board 14, to allow for the disposition 
of the circuit components 16A-16D inclusive (Fig. 2) 
on the upper surface of the board 14. 

The manner in which the security device 10 is 
assembled will now be described. First, the side 
plates P2-P5 inclusive (Fig. 2) are attached together, 
using ceramic filled epoxy material. The assembly 
consisting of the side plates P2-P5 inclusive is then 
attached to the printed circuit board 14 using ceramic 
filled epoxy material 42 at the junction with the side 
plate P3, and the conductive epoxy material 40 at the 
junction with the conductive islands such as P2L2 to 
B4 (Fig. 17). Next, the top plates P1, having the con- 
ductive wires 58, 60 attached thereto, is attached to 
the top edges of the side plates P2-P5 inclusive using 
ceramic filled epoxy 42 and the wires 58, 1 60 are pas- 
sed through the plated holes B9, B10 in the plated 
holes B9, B10 and the wire ends protruding beyond 
the soldered connection are cut off. Finally the base 
plate P6 is provided with conductive epoxy material 
(not shown) on the conductive islands P6L1 , P6L2 
and attached to the lower edges of the plates P2, P4 
and P5 and to the printed circuit board 14, using 
ceramic filled epoxy material 42, such that the con- 
ductive regions B11, B12 on the printed circuit board 
14. The thus assembled security device 10 is held 
together with a spring (not shown) while the epoxy 
material bonding is cured in an over at about 125 deg- 
rees Celsius, after which the spring is removed. It will 
be appreciated that the security device 10 has the 
advantage that it can be manufactured by a simple 
and inexpensive procedure. Furthermore, once the 
device 1 0 is assembled, any attempt to remove the 
top plate P1 will result in the interruption of at least one 
of the conductive wires, 58, 60. 

Referring now to Fig. 21 , the electronic circuity 16 



of Fig. 2 will now be discussed in more detail. The 
electronic circuity 16 includes data processing cir- 
cuitry 100 and tamper detection circuity 103. 

The data processing circuitry 100 can be utilized 

5 to perform any desired data processing operation sys- 
tems, electronic fund transfers, data encryption/dec- 
ryption, PIN (personal identification number) 
verification, data transmission/reception, access con- 
trol and home banking. The data processing circuity 

10 100 includes a processor 102 for selectively control- 
ling the operation of the electronic circuitry 16 in res- 
ponse to input data and instructions, a timing and 
control circuit 104 for controlling the operation of the 
processor 102, a random access memory (RAM) 108 

15 for storing the software program to be executed by the 
processor 102 and for providing a temporary memory 
storage, a volatile memory 1 1 0 for storing most sen- 
sitive or secure data such as a key storage key (KSK) 
(to be explained hereinafter), a random number 

20 generator 112 and input/output (I/O) unit 114. 

A data, control and address bus 116, bidirectional 
I/O bus 118 and I/O lines 120 and 122 are coupled to 
the processor 102, timing and control circuit 104, 
RAM 108 and I/O unit 1 14 to enable the data proces- 

25 sing circuity 1 00 to perform its data processing oper- 
ations. Data may be passed over bidirectional I/O bus 
118 to or from the processor 102 and over I/O lines 
120 and 122 to or from the I/O unit 114. The remote 
ends of the I/O bus 118 and I/O lines 120 and 122 may 

30 be selectively coupled to, for example, another data 
processor (not shown), a main computer (not shown) 
and a peripheral (such as a keyboard) (not shown) via 
the connector 18 (Fig. 2) in order to enable the data 
processing circuity 100 to perform its preselected 

35 operations. 

Power to operate the electronic circuitry 16 is 
preferably supplied from external power sources (not 
shown), such as power supplies and batteries, via the 
connector 1 8. 

40 An initialization subroutine, contained in the 

software program stored in the RAM 108, is executed 
in a special mode of operation controlled by an 
authorized person. Preferably, this initialization sub- 
routine can only be executed once after the security 

45 device 10 has been completely assembled. 

For purposes of additional security it is preferable 
that the volatile memory 1 1 0 be, for example, a resett- 
able memory such as a 64-bit shift register memory. 
During the execution of an INITIALIZE subroutine 

so the processor 1 02 applies an INITIALIZE signal to the 
random number generator 112 to enable the 
generator 1 12 to generate a random number which is 
stored in the memory 1 10 as an exemplary sequence 
of 64 random bits. This sequence of 64 random bits 

55 is the KSK (key storage key), which is the most sen- 
sitive or secure data contained in the data processing 
circuitry 100. The KSK is utilized to encrypt keys 
which are to be entered into the security device 10 for 
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storage in the RAM 108. Such keys are then used in 
data encryption operations. The precise manner in 
which the KSK is utilized is not of significance to the 
present invention and will, therefore, not the further 
described herein. It should, however, be noted that 
the resettable memory 110 stores the KSK, that the 
contents of the memory 110 should not be altered (if 
the security device 10 was programmed to run the 
initialization program only once), that the KSK is never 
outputted to the oustide world from the security device 
10, and that for purposes of security external access 
to the KSK contents of the memory 110 by various 
means must be prevented. 

Tamper detection circuitry 102 is included in the 
electronic circuitry 16 to specifically destroy the KSK 
in the resettable memory 110 if there is any attempt 
to penetrate the housing 12 of the security device 10 
to gain access to the KSK stored in the memory 110. 
It should be realized that if the KSK is destroyed, any 
encrypted data or keys stored in RAM 108 become 
meaningless or useless. 

An attempt to penetrate the ceramic housing 12 
of the security device 10 may be made by drilling into 
or cracking the housing 12. To protect against this 
possibility, the wire mesh WM of Fig. 20 is connected 
between a reference potential Vc and ground, and to 
a sense circuit 124. An attempt to drill into or crack the 
housing 12 that interrupts or damages the wire mesh 
WM causes the sense circuit 124 to generate a reset 
signal. An attempt to remove the top plane P1 will 
result in at least one of the conductive wires 58, 60 
being broken, thereby interrupting the wire mesh WM. 
Similarly, if the wire mesh WM is shorted by such an 
attempt, the sense circuit 124 will generate a reset 
signal. 

A different type of attempt to penetrate the hous- 
ing 12 is to remove the adhesive bonding the plates 
together and to attempt to pivot one of the side plates 
P2-P5 so as to provide a small aperture sufficient to 
pass an electrical probe into the interior of the housing 
12 and make contact with the electronic circuitry 16 
therein. This type of penetration attempt is also pre- 
vented. For example, an attempt to pivot the side plate 
P5 inwards is prevented by the aformentioned end-to- 
side disposition of the side plates, whereas an attempt 
to pivot the side plate P5 outwards results in damage 
to or disruption of the frangible electrically conductive 
material 40 interconnecting the conductive areas 
P5L1 and B5 and/or the frangible electrically conduc- 
tive material 40 interconnecting the conductive areas 
P5L2 and R6. With regard to the side plate P3, which 
is mounted on the printed circuit board 14, pivoting 
inwards is prevented by the end-to-side side plate dis- 
position. Pivoting of the side plate P3 outwards results 
in electrical disconnection of the interconnection 
block 250 and hence activation of the tamper detec- 
tion circuitry 102. In this connection, it will be 
appreciated that if the electrical connections to the 



side plate P3 are both located on the printed circuit 
board 14, then pivoting of the side plate P3 outwards 
might be possible without disrupting such frangible 
electrical interconnecting material, since the pivot 

5 axis would be in line with the printed circuit board 14. 

Referring to Fig. 22, the tamper detection circuitry 
103 will now be described. The terminal TB of the wire 
mesh WM is connected via a 1 00 kilohm resistor 140 
to a junction point 142. The junction point 142 is con- 
to nected via a 5.6 megohm resistor 144 to ground, to 
one side of a 22 microfarad capacitor 146, the other 
side of which is grounded, and to the input of an inver- 
ter 148. The output of the inverter 148 is connected to 
an output terminal 150 which is connected to the 

15 RESET input of the resettable memory 110. 

Since the terminal TA of the wire mesh WM is 
connected to a reference voltage supply Vc, the 
capacitor 146 is normally maintained in a charged 
condition. An interruption in, or grounding of the wire 

20 mesh WM, however, will cause the capacitor 146 to 
discharge and thereby produce a positive going 
RESET pulse at the output of the inverter 148, which 
pulse is supplied via the output terminal 150 to reset 
the resettable memory 110. 

25 The remaining components shown in Fig. 22 

enable the memory 1 1 0 to be reset in response to an 
external reset signal applied, via the connector 18 
(Fig. 2) to the terminal 152. The terminal 152 is con- 
nected via a 10 kilohm resistor 154 to ground and to 

30 the input of an inverter 151, the output of which is con- 
nected via an isolating diode 158 to the junction point 
142. It will be appreciated that a position-going input 
signal on the terminal 152 will produce a positive- 
going RESET pulse on the output terminal 150 to 

35 reset the resettable memory 110. 



Claims 

40 1. A security device for protecting stored sensitive 
data, including a closed housing (12) containing 
memory means (110) adapted to store sensitive 
data and including a top plate (P1), a base place 
(P6) and a plurality of side plates (P2-P5) having 

45 meandering conductive path segments on side 

faces thereof, and interconnection means 
(40,250) arranged to electrically interconnect 
said conductive path segments to form conduc- 
tive path means (WM), the interrruption of which, 

so brough about by an attempt to penetrate said 

housing (12) causes the erasure of the contents 
of said memory means (110), characterized in 
that said side plates (P2-P5) are disposed such 
that each of said side plates (P2-P5) has an end 

55 face thereof (e.g. 200) abutting a side face 

(e.g.202) of another side plate, whereby pivoting 
movement of any of said side plates (P2-P5) 
resulting from an attempt to penetrate said hous- 
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ing (12) is prevented, or results in a disruption of 
said interconnection means (40,250). 

2. A security device according to claim 1, charac- 
terized in that said memory means (110) is moun- 
ted on a printed circuit board (14) which is 
mounted on said base plate (P6), in that first, sec- 
ond and third side plates (P2,P4, P5) are mounted 
between said top and base plates (P1 ,P6), and in 
that a fourth side plate (P3) is mounted between 
said top plate (P1) and said printed circuit board 
(14), which extends outwardly from said housing 
(12) through an aperture between said fourth side 
plate (P3) and said plate (P6). 

3. A security device according to claim 2, charac- 
terized in that said interconnection means 
includes frangible, electrically conductive ma- 
terial (40) interconnecting conductive areas (e.g. 
P5L1, P5L2) on said sides plates (e.g. P5) with 
conductive areas (e.g. B5, B6) on said printed cir- 
cuit board (14). 

4. A security device according to claim 3, charac- 
terized in that said interconnection means 
includes a multi-sided block (250) having first, 
second and third conductive areas (260, 262, 
264) disposed on respective first, second and 
third surfaces thereof to form a continuous con- 
ductive path from said first conductive area (260) 
via said second conductive area (262) to said 
third conductive area (264), said multi-sided 
block (250) being positioned to interconnect con- 
ductive areas (P2L1, P3L2) on said first and 
fourth side plate (P2, P3). 

5. A security device according to any one of the pre- 
ceding claims, characterized in that said intercon- 
nection means includes conductive track means 
(52,54,56,62) on said printed circuit board (14), 
and conductive wires (58,60) extending through 
apertures (B9,B10) in said printed circuit board 
(14) to directly connect with said conductive track 
means on said printed circuit board (14). 

6. A security device according to any one fo the pre- 
ceding claims, characterized in that said conduc- 
tive path segments are formed by a conductive 
thick film having a thickness in the range of from 
about 10 microns to about 15 microns. 

7. A security device according to any one of the pre- 
ceding claims, characterized in that said conduc- 
tive path segments are formed in meandering 
configurations over subsantially the entire inner 
surface areas of said plates (P1-P6). 

8. A security device according to any one of the pre- 



ceding claims, characterized in that said conduc- 
tive path means (WM) is connected between volt- 
age supply means (Vc) and a reference potential 
means, and in that a sensing circuit (1 24) is adap- 
5 ted to detect the interruption of the current path 

between said voltage supply means (Vc) and said 
reference potential means. 

9. A security device according to claim 8, charac- 
10 terized in that said sensing circuit (124) includes 

capacitive means (146) in circuit with said con- 
ductive path means (WM), and an inverter (148), 
responsive to the charge state of said capacitive 
means (146) to produce a reset signal for erasing 
15 said memory means (110) in response to the 

interruption of said conductive path means (WM). 
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